Wazuh osquery

Server Install

Server Config

windows debug

wodle name="osquery" - Local configuration (ossec.conf)wazuh

1. keep default value to yes

2. remove default value on windows what is happening is the instance is running twice